3 people d15c14ec6a avoid potential timing attack when validating SHA256 credentials (#5961) ...

The == operator is vulnerable to timing attacks as it short-circuits on a mismatch. Use
ConstantTimeCompare to avoid this vector.

Co-authored-by: Tristan Matthews <tmatth@videolan.org>

2026-07-19 09:46:34 +02:00

..

api

support encoding secondary stream with H264 (2/2) (#4485) (#5898)

2026-06-28 11:19:23 +02:00

apidocsgen

api: generate most of OpenAPI automatically (#5918)

2026-07-04 17:45:43 +02:00

auth

improve anti-brute force mechanism (#5835)

2026-06-05 17:01:36 +02:00

certloader

support reading and publishing with Media-over-QUIC (#5815)

2026-06-02 23:04:24 +02:00

conf

avoid potential timing attack when validating SHA256 credentials (#5961)

2026-07-19 09:46:34 +02:00

confwatcher

tests: use testing.T.TempDir rather than os.TempDir (#5709)

2026-04-29 22:47:47 +02:00

core

rename runOnReady into runOnAvailable, runOnNotReady into runOnUnavailable (#5957)

2026-07-18 17:58:16 +02:00

counterdumper

api: add new stats (#5582)

2026-03-17 17:22:15 +01:00

defs

api: generate most of OpenAPI automatically (#5918)

2026-07-04 17:45:43 +02:00

errordumper

api: add new stats (#5582)

2026-03-17 17:22:15 +01:00

externalcmd

replace errors.As with modern errors.AsType (#5834)

2026-06-05 09:56:06 +02:00

formatlabel

rtmp: support reading and writing FLAC (#5778) (#5789)

2026-05-21 14:50:06 +02:00

hooks

rename runOnReady into runOnAvailable, runOnNotReady into runOnUnavailable (#5957)

2026-07-18 17:58:16 +02:00

linters

api: generate most of OpenAPI automatically (#5918)

2026-07-04 17:45:43 +02:00

logger

use file name suffix for OS-specific code wherever possible (#5787)

2026-05-19 11:48:05 +02:00

metrics

improve anti-brute force mechanism (#5835)

2026-06-05 17:01:36 +02:00

ntpestimator

recorder: reset when absolute time drifts from stream time (#4778) (#5239)

2025-12-02 18:10:23 +01:00

packetdumper

rtmp, rtsp: support PROXY protocol (#5754)

2026-06-05 21:37:53 +02:00

playback

playback: fix panic when MP4 muxer flushes with no samples (#5867)

2026-06-13 11:22:53 +02:00

pprof

improve anti-brute force mechanism (#5835)

2026-06-05 17:01:36 +02:00

protocols

webrtc: skip unresolvable webrtcAdditionalHosts entries instead of aborting (#5845)

2026-06-22 21:14:04 +02:00

recordcleaner

tests: use testing.T.TempDir rather than os.TempDir (#5709)

2026-04-29 22:47:47 +02:00

recorder

rtsp: use ServerStream.ReloadDesc to propagate description changes to RTSP servers (#5856)

2026-06-10 23:46:02 +02:00

recordstore

prevent truncation of 64-bit values on 32-bit platforms (#5902)

2026-06-28 11:37:14 +02:00

restrictnetwork

support filtering interface and source IP in UDP sources (#4178) (#4464)

2025-04-28 22:22:55 +02:00

rlimit

use file name suffix for OS-specific code wherever possible (#5787)

2026-05-19 11:48:05 +02:00

servers

srt: fix compatibility with StreamToStudio app (#5414) (#5928)

2026-07-18 17:59:05 +02:00

staticsources

rtsp: restrict UDP port range to 32768-60999 (#5398) (#5958)

2026-07-18 20:59:33 +02:00

stream

fix wrong PTS and wrong playback of alwaysAvailableFile (#5436) (#5960)

2026-07-18 22:39:28 +02:00

test

rtsp: use ServerStream.ReloadDesc to propagate description changes to RTSP servers (#5856)

2026-06-10 23:46:02 +02:00

teste2e

bump Alpine to 3.24 (#5853)

2026-06-15 19:02:39 +02:00

unit

rtmp: support reading and writing FLAC (#5778) (#5789)

2026-05-21 14:50:06 +02:00

upgrade

add --check-version command line flag (#5786)

2026-05-19 11:42:32 +02:00